Priority MEDIUM 45
Gradio before 6.16.0 contain a path traversal vulnerability in the FileExplorer component's preprocess() method that allows unauthenticated attackers to escape the configured root directory by supplying path segments con…
CVSS 4.0HIGH 8.7· Network · No auth · No interaction · EPSS 0.0069 · Published 2026-07-01 · Fixed in 6.16.0 CWE-22
Priority MEDIUM 44
A security flaw has been discovered in gradio-app gradio 6.14.0.
CVSS 4.0LOW 2.0· Local · Low privileges · No interaction · EPSS 0.00106 · Published 2026-06-03 · Fixed in 6.15.1 CWE-327
Priority HIGH 68
Gradio before version 6.15.0 contains a cookie injection vulnerability that allows remote attackers to perform cross-Space session fixation by exploiting a shared module-level HTTP client used across all users in the rev…
CVSS 4.0HIGH 7.6· Network · No auth · User interaction · EPSS 0.0035 · Published 2026-05-27 · Fixed in 6.15.0 CWE-384
Priority HIGH 76
Gradio is an open-source Python package designed for quick prototyping.
CVSS 3.1HIGH 8.6· Network · No auth · No interaction · EPSS 0.07262 · Published 2026-02-27 · Fixed in 6.6.0 CWE-918
Priority LOW 21
Gradio is an open-source Python package designed for quick prototyping.
CVSS 3.1MEDIUM 4.7· Network · No auth · User interaction · EPSS 0.00288 · Published 2026-02-27 · Fixed in 6.6.0 CWE-200
Priority HIGH 66
Gradio is an open-source Python package designed for quick prototyping.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.03059 · Published 2026-02-27 · Fixed in 6.7, 6.7.0 CWE-36
Priority MEDIUM 60
Gradio is an open-source Python package designed for quick prototyping.
CVSS 3.1MEDIUM 5.9· Network · No auth · No interaction · EPSS 0.0051 · Published 2026-02-27 · Fixed in 6.6.0 CWE-522
Priority HIGH 72
Gradio is an open-source Python package that allows quick building of demos and web application for machine learning models, API, or any arbitrary Python function.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00688 · Published 2025-05-30 · Fixed in 5.31.0 CWE-434
Priority MEDIUM 60
An open redirect vulnerability exists in the latest version of gradio-app/gradio.
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00759 · Published 2025-03-20 · No fix listed CWE-601
Priority HIGH 75
A path traversal vulnerability exists in the Gradio Audio component of gradio-app/gradio, as of version git 98cbcae.
CVSS 3.0HIGH 8.2· Network · No auth · No interaction · EPSS 0.00731 · Published 2025-03-20 · No fix listed CWE-29
Priority HIGH 72
A vulnerability in the dataframe component of gradio-app/gradio (version git 98cbcae) allows for a zip bomb attack.
CVSS 3.0HIGH 7.5· Network · No auth · No interaction · EPSS 0.00661 · Published 2025-03-20 · No fix listed CWE-475
Priority HIGH 72
A Regular Expression Denial of Service (ReDoS) vulnerability exists in the gradio-app/gradio repository, affecting the gr.Datetime component.
CVSS 3.0HIGH 7.5· Network · No auth · No interaction · EPSS 0.01099 · Published 2025-03-20 · No fix listed CWE-1333
Priority HIGH 72
A Denial of Service (DoS) vulnerability was discovered in the file upload feature of gradio-app/gradio version 0.39.1.
CVSS 3.0HIGH 7.5· Network · No auth · No interaction · EPSS 0.00737 · Published 2025-03-20 · No fix listed CWE-400
Priority HIGH 77
Gradio is an open-source Python package that allows quick building of demos and web application for machine learning models, API, or any arbitrary Python function.
CVSS 4.0HIGH 8.7· Network · No auth · No interaction · EPSS 0.00997 · Published 2025-01-14 · Fixed in 5.6.0, 5.11.0 CWE-285
Priority MEDIUM 62
Gradio is an open-source Python package designed to enable quick builds of a demo or web application.
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.00681 · Published 2024-11-06 · Fixed in 5.5.0 CWE-22
Priority MEDIUM 62
In gradio <=4.42.0, the gr.DownloadButton function has a hidden server-side request forgery (SSRF) vulnerability.
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.0047 · Published 2024-11-04 · No fix listed CWE-918
Priority LOW 11
Gradio is an open-source Python package designed for quick prototyping.
CVSS 4.0LOW 2.1· Network · High privileges · No interaction · EPSS 0.00213 · Published 2024-10-10 · Fixed in 5.0, 5.0.0 CWE-345
Priority LOW 30
Gradio is an open-source Python package designed for quick prototyping.
CVSS 4.0MEDIUM 6.3· Network · No auth · No interaction · EPSS 0.00822 · Published 2024-10-10 · Fixed in 5.0, 5.0.0 CWE-200
Priority LOW 12
Gradio is an open-source Python package designed for quick prototyping.
CVSS 4.0LOW 2.3· Network · Low privileges · No interaction · EPSS 0.00295 · Published 2024-10-10 · Fixed in 4.44, 4.44.0 CWE-203
Priority LOW 33
Gradio is an open-source Python package designed for quick prototyping.
CVSS 4.0HIGH 7.1· Network · Low privileges · No interaction · EPSS 0.00372 · Published 2024-10-10 · Fixed in 5.0.0 CWE-362
Priority LOW 35
Gradio is an open-source Python package designed for quick prototyping.
CVSS 4.0HIGH 8.2· Network · No auth · No interaction · EPSS 0.00176 · Published 2024-10-10 · Fixed in 5.0.0 CWE-311
Priority LOW 36
Gradio is an open-source Python package designed for quick prototyping.
CVSS 4.0MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.00277 · Published 2024-10-10 · Fixed in 5.0, 5.0.0 CWE-79
Priority LOW 37
Gradio is an open-source Python package designed for quick prototyping.
CVSS 4.0MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.00528 · Published 2024-10-10 · Fixed in 4.44, 4.44.0 CWE-285
Priority LOW 13
Gradio is an open-source Python package designed for quick prototyping.
CVSS 4.0LOW 2.3· Network · Low privileges · No interaction · EPSS 0.00705 · Published 2024-10-10 · Fixed in 5.0, 5.0.0 CWE-22
Priority LOW 36
Gradio is an open-source Python package designed for quick prototyping.
CVSS 4.0MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.00298 · Published 2024-10-10 · Fixed in 5.0, 5.0.0 CWE-285
Load more
THREATIST.IORead the docs